Security Analyst

Job Summary: We are seeking a skilled Security Analyst reporting to our Group Head of Technology that will play a critical role in protecting our organisation's information systems and data. This position will be responsible for managing our security infrastructure, responding to threats, and ensuring our security posture remains robust and compliant with industry standards. Key accountabilities Security Platform Management Administer and manage CrowdStrike security platform, including deployment, configuration, and optimization Monitor security alerts and events through CrowdStrike console Perform regular health checks and ensure platform updates are applied Manage endpoint detection and response (EDR) activities Configure and fine-tune detection rules and policies Threat Detection & Response Monitor, analyse, and respond to security incidents and alerts Investigate suspicious activities and potential security breaches Perform root cause analysis on security incidents Document incident response procedures and maintain incident logs Implement remediation measures and track resolution progress Security Reporting & Communication Prepare regular security status reports for management Provide updates on security metrics, incidents, and trends Generate monthly and quarterly security dashboards Present findings and recommendations to stakeholders Respond to internal and external due diligence queries regarding security controls and practices Threat Intelligence & Awareness Stay current with emerging security threats, vulnerabilities, and attack vectors Monitor threat intelligence feeds and security advisories Assess the relevance and impact of new threats to the organisation Share threat intelligence insights with the team Recommend proactive security measures based on threat landscape Security Testing & Compliance Coordinate and manage annual penetration testing exercises Work with external security assessors and penetration testers Review penetration test findings and develop remediation plans Track and verify remediation of identified vulnerabilities Conduct annual Essential Eight security maturity assessments Ensure compliance with Essential Eight framework requirements Document security controls and maintain compliance evidence Vulnerability Management Conduct regular vulnerability scans and assessments Prioritise vulnerabilities based on risk and business impact Track remediation efforts and coordinate with IT teams Maintain vulnerability management database and reporting Verify patch compliance across systems and endpoints Access Control & Identity Management Ensure principle of least privilege is maintained Monitor privileged account usage and activities Security Monitoring & Log Analysis Review security logs from various systems and applications Correlate events across multiple security tools Identify anomalous behaviour and potential security issues Maintain and tune security monitoring rules and alerts Archive logs in compliance with retention policies Security Tools Administration Manage antivirus, anti-malware, and endpoint protection solutions Administer firewalls, intrusion detection/prevention systems Maintain data loss prevention (DLP) tools Configure and manage web filtering and email security gateways Ensure security tools are properly integrated and functioning Change Management & Configuration Review Review changes to critical systems for security implications Participate in change advisory board meetings Assess security impact of proposed system changes Verify security configurations align with hardening standards Maintain secure baseline configurations Vendor & Third-Party Risk Management Assess security posture of vendors and third-party providers Review vendor security documentation and certifications Monitor compliance with contractual security requirements Participate in vendor security assessments Support procurement process with security evaluations Backup & Disaster Recovery Verify security of backup systems and processes Test backup restoration procedures periodically Review disaster recovery and business continuity plans from a security perspective Ensure encrypted backups are maintained and accessible Participate in disaster recovery exercises Documentation & Continuous Improvement Maintain security policies, procedures, and documentation Create and update security runbooks and playbooks Contribute to security awareness and training initiatives Develop security metrics and KPIs Identify opportunities for security process improvements Participate in security projects and initiatives Conduct security tabletop exercises Essential 4+ years working in information security or cybersecurity operations Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field Familiarity with fund management, non-bank lending industry and regulatory landscape. Hands-on experience with security monitoring and incident response Desirable Relevant security certifications (Security+, CySA+, CEH, GCIH, or similar) CrowdStrike Certified Falcon Administrator or similar certification Experience with compliance frameworks (ISO 27001, NIST, CIS Controls) Familiarity with scripting languages (PowerShell, Python) Knowledge of Australian government security frameworks (ACSC, ISM) Ability to explain technical security concepts to non-technical stakeholders Proven experience with CrowdStrike or similar EDR/XDR platforms Strong understanding of security principles, threats, and vulnerabilities Knowledge of Windows and Linux operating systems Familiarity with network protocols, firewalls, and security technologies Experience with security information and event management (SIEM) tools Knowledge of penetration testing methodologies and vulnerability management Personal A team player who demonstrates enthusiasm, resilience and ethical behaviour Ability to think outside the box while maintaining an unbiased, risk and analytically driven assessment of alternate options when decisioning applications. An ability to liaise well with others of all levels and source information and delegate efficiently Honest and open both in actions and words with a drive to achieve results without sacrificing culture Excellent written and verbal communication skills Strong attention to detail, a mature positive attitude and strong work ethic Work Setup: Shift: Dayshift Setup: Onsite Location: Pasig By Applying, you give consent to collect, store, and/or process personal and/or sensitive information for the purpose of recruitment and employment may it be internal to Cobden & Carter International and/or to its clients.